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DETAILED ACTION 

1. Claims 30-38 are pending. 

2. Response filed 11/07/2007 has been received and fully 
considered . 

Claim Rejections - 35 USC §103 

3. Claims 30-38' are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Boroughs et al. (US 6834350) in view of 
Riordan et al. (Target Naming and Service Apoptosis) . 

As per claims 30 and 33, Boroughs et al, discloses a 
security system comprising: an activation token identifying 
system characteristics- and specifying a threat and at least one 
preset activation measure, wherein a system characteristic is 
one of the group of a hardware system, a service, a 
configuration of a service, a service execution platform, and a 
service session (see column 2 line 62 through column 3 line 34); 
a first system configured to at least review security and 
vulnerability information form information publishers and to 
provide the activation token based on filtered security and 
vulnerability information (see column 2 line 59 through column 3 
line 10) ; and a second system* configured to determine whether 
the activation token is relevant by checking if actual 
characteristics at the second system correspond to the system 
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characteristics identified by the activation token, the second 
system further configured to transform the activation token into 
at least one activation measure if the activation token is 
considered relevant by the second system the activation measure 
configured to modify services executing at the second system 
(see column 3 lines 35-67 and column 4 lines 1-5) wherein the 
first system. is further configured to automatically filter the 
security and vulnerability information relevant to the system 
characteristics identified by the activation token (see column 2 
line 59 through column 3 line 10 and Figure 17) . 

Boroughs et al. fail to explicitly disclose including a 
threat level within the activation token. 

However, Riordan et al. teaches including a trust level (as 
well as system characteristics) with an activation token (see 
page 220) . 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to include trust levels 
with the activation tokens of Boroughs et al. 

Motivation to do so would have been to distinguish between 
the severities of threats (see page 220) . . 

As per claim 31, the modified Boroughs et al. and Riordan 
et al. system discloses cryptographic means configured to verify 
at the second system that the first system is a trusted service 
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(see Boroughs et al. column 3 lines 55-67 and Riordan et al. 
pages 220 and 223) . 

As per claim 32, the modified Boroughs et al. and Riordan 
et al. system discloses reporting means configured to report to 
a system administrator of the second system any activation 
measure taken by the second system (see Riordan et al. page 223 
and Boroughs et al. column 2 lines '59-67). 

As per claim 34, the modified Boroughs et al . and Riordan 
et.al. system discloses a list of trusted service providers from 
whom activation tokens are accepted by the second system (see 
Riordan et al. page 222). 

As per claims 35-38, the modified Boroughs et al. and 
Riordan et al. system discloses a preset' activation measure is 
one of shutting down a service affected by the specified threat 
level, reconfiguration of the service, installing a patch for 
the service and altering a system administrator (see Riordan et 
al . page 223 ) . 

Response to Arguments 

4. Applicant's arguments filed 09/24/2007 have been fully 
considered but they are not persuasive. Applicant argues that 
previous Final rejection was improper, the Barnes reference does 
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not disclose a threat level within an activation token and the 
rejections amount to conclusory statements. 

With respect to Applicant's argument that the Final 
rejection was improper, the finality of the previous action has 
been withdrawn and has now been considered to be non-final. 

With respect to Applicant's argument that the Barnes 
reference does not disclose a threat level within an activation 
token, the Barnes and Noble reference was relied upon to show 
that the Riordan et al. reference has a publication date of 
January 2000 which is more than a year prior to Applicant's 
application date and therefore qualifies as prior art. This is 
evidenced by the same titles and volume numbers. Therefore, the 
date, as established in the previous action, of the Riordan et 
al. reference is January 2000. Furthermore, as discussed in the 
above rejection Riordan teaches a threat level within an 
activation token on page 220. 

Applicant argues that the rejections amount to conclusory 
statements with respect to certain limitations, these 
limitations have been addressed below: 

an activation token (i.e. the distribution) identifying 
system characteristics wherein a system characteristic is one of 
the group of a hardware system, a service, a configuration of a 
service, a service execution platform, and a service session 
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(i.e. the subscriber information storing in the database 
describer in column 3 lines 19-21) and specifying a threat (i.e. 
the newly discovered network attack in column 2 lines 63-64) and 
at least one preset activation measure (i.e. the contained 
software described in column 2 line 64 through column 3 line 5) . 

a first system configured to at least review security and 
vulnerability information form information publishers and to 
provide the activation token based on filtered security and 
vulnerability information (i.e. the system of security experts 
who obtain the newly discovered threat and create the 
distribution) . 

a second system configured to determine whether the 
activation token is relevant by checking if actual 
characteristics at the second system correspond to the system 
characteristics identified by the activation token, the second 
system further configured to transform the activation token into 
at least one activation measure if the activation token is 
considered relevant by the second system the activation measure 
configured to modify services executing at the second system 
(see column 2 lines 51-58 where the distribution is distributed 
based on subscriber characteristics). 
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Conclusion 

5. THIS ACTION IS MADE FINAL. Applicant is reminded of the 
exteasion of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this 
action. In the event a first reply is filed within TWO MONTHS 
of the mailing date of this final action and the advisory action 
is not mailed until after the end of the THREE-MONTH shortened 
statutory period, then the shortened statutory period will 
expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated 
from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than 
SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Michael 
Pyzocha whose telephone number is (571) 272-3875. The examiner 
can normally be reached on 7:00am - 4:30pm first Fridays of the 
bi-week off. 

If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, Emmanuel Moise can be 
reached on (571) 272-3865. The fax phone number for the 
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organization where this application or proceeding is assigned is 
571-273-8300. 

Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 

(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free) . If you would 
like assistance from a USPT0 Customer Service Representative or 
access to the automated information system, call 800-786-9199 

(IN USA OR CANADA) or 571-272-1000. 
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